CVE-2026-11841: CVE-2026-11841
SICK AG · InspectorP61x
Vendor fix available · Affected: SICK AG InspectorP61x · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
Higher than 58% of scored CVEs
DescriptionNVD
An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access without authentication. This includes device parameter files, enabling an attacker to read and modify application settings, including customer-defined passwords. Additionally, exposure of the custom application directory may allow execution of arbitrary Lua code within the sandboxed AppEngine environment.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 3 Aug.
- SICK InspectorP6xx Flaw CVE-2026-11841 Could Lead to Full Device CompromiseSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.